| Description:
|
Details
Lawine.2449
It is not a dangerous memory resident encrypted stealth parasitic virus. It hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed. On selecting a new directory the virus searches for COM files in there and infects them. The virus disables its stealth and infection routines when files with several hard-coded lengths are executed (anti-virus scanners?). The virus also does not infect the anti-virus programs:
F-PR,TBAV,SCAN,MSAV,CPAV,TBME,TBFI,TBSC
The virus contains the text strings:
allGravenreuth says: Gotcha !.... ...LAWINE was written in
Germany '94...Greetings to NB... |
